General
-
Target
6f59f808e8e8d2a2d8f6c771ac2270800cd02abbc7ea4274b896e1b72143aab2
-
Size
424KB
-
Sample
210926-sxms1afah4
-
MD5
4e488dd6b7fa3130e637073d6a419449
-
SHA1
51405fcc3da5ef2b844f0bb8649367b124a4ecdb
-
SHA256
6f59f808e8e8d2a2d8f6c771ac2270800cd02abbc7ea4274b896e1b72143aab2
-
SHA512
6abbc82db75c88da4b70094737c1982f3abadd3229966b5798847577cb9b25d69c2694f16fbd324fee1fc11335f3b7cebd28091a3834a0c26a423cb77bc4fc5f
Static task
static1
Behavioral task
behavioral1
Sample
6f59f808e8e8d2a2d8f6c771ac2270800cd02abbc7ea4274b896e1b72143aab2.exe
Resource
win10v20210408
Malware Config
Extracted
raccoon
f6d7183c9e82d2a9b81e6c0608450aa66cefb51f
-
url4cnc
https://t.me/justoprostohello
Targets
-
-
Target
6f59f808e8e8d2a2d8f6c771ac2270800cd02abbc7ea4274b896e1b72143aab2
-
Size
424KB
-
MD5
4e488dd6b7fa3130e637073d6a419449
-
SHA1
51405fcc3da5ef2b844f0bb8649367b124a4ecdb
-
SHA256
6f59f808e8e8d2a2d8f6c771ac2270800cd02abbc7ea4274b896e1b72143aab2
-
SHA512
6abbc82db75c88da4b70094737c1982f3abadd3229966b5798847577cb9b25d69c2694f16fbd324fee1fc11335f3b7cebd28091a3834a0c26a423cb77bc4fc5f
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-